/* */ #include "Cookie.h" #include #include "Util.h" #include "A2STR.h" #include "TimeA2.h" namespace aria2 { Cookie::Cookie(const std::string& name, const std::string& value, time_t expiry, const std::string& path, const std::string& domain, bool secure): _name(name), _value(value), _expiry(expiry), _path(path), _domain(Util::toLower(domain)), _secure(secure) {} Cookie::Cookie(const std::string& name, const std::string& value, const std::string& path, const std::string& domain, bool secure): _name(name), _value(value), _expiry(0), _path(path), _domain(Util::toLower(domain)), _secure(secure) {} Cookie::Cookie():_expiry(0), _secure(false) {} Cookie::~Cookie() {} std::string Cookie::toString() const { return _name+"="+_value; } bool Cookie::good() const { return !_name.empty(); } static bool pathInclude(const std::string& requestPath, const std::string& path) { if(requestPath == path) { return true; } if(Util::startsWith(requestPath, path)) { if(*path.rbegin() != '/' && requestPath[path.size()] != '/') { return false; } } else if(*path.rbegin() != '/' || *requestPath.rbegin() == '/' || !Util::startsWith(requestPath+"/", path)) { return false; } return true; } static bool domainMatch(const std::string& requestHost, const std::string& domain) { if(*domain.begin() == '.') { return Util::endsWith("."+requestHost, domain); } else { return requestHost == domain; } } bool Cookie::match(const std::string& requestHost, const std::string& requestPath, time_t date, bool secure) const { std::string lowerRequestHost = Util::toLower(requestHost); if((secure || (!_secure && !secure)) && domainMatch(lowerRequestHost, _domain) && pathInclude(requestPath, _path) && (isSessionCookie() || (date < _expiry))) { return true; } else { return false; } } bool Cookie::validate(const std::string& requestHost, const std::string& requestPath) const { std::string lowerRequestHost = Util::toLower(requestHost); if(lowerRequestHost != _domain) { // domain must start with '.' if(*_domain.begin() != '.') { return false; } // domain must not end with '.' if(*_domain.rbegin() == '.') { return false; } // domain must include at least one embeded '.' if(_domain.size() < 4 || _domain.find(".", 1) == std::string::npos) { return false; } if(!Util::endsWith(lowerRequestHost, _domain)) { return false; } // From RFC2109 // * The request-host is a FQDN (not IP address) and has the form HD, // where D is the value of the Domain attribute, and H is a string // that contains one or more dots. if(std::count(lowerRequestHost.begin(), lowerRequestHost.begin()+ (lowerRequestHost.size()-_domain.size()), '.') > 0) { return false; } } if(requestPath != _path) { // From RFC2109 // * The value for the Path attribute is not a prefix of the request- // URI. if(!pathInclude(requestPath, _path)) { return false; } } return good(); } bool Cookie::operator==(const Cookie& cookie) const { return _domain == cookie._domain && _path == cookie._path && _name == cookie._name; } bool Cookie::isExpired() const { return !_expiry == 0 && Time().getTime() >= _expiry; } const std::string& Cookie::getName() const { return _name; } const std::string& Cookie::getValue() const { return _value; } const std::string& Cookie::getPath() const { return _path; } const std::string& Cookie::getDomain() const { return _domain; } time_t Cookie::getExpiry() const { return _expiry; } bool Cookie::isSecureCookie() const { return _secure; } bool Cookie::isSessionCookie() const { return _expiry == 0; } } // namespace aria2